Red Hat Security AdvisoryRHSA-2022:7086
pki-core security update
Released 2022-10-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +6
- Red Hat Enterprise Linux Server (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +5
- Red Hat Enterprise Linux Server Optional (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +6
- Red Hat Enterprise Linux Workstation (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +5
- Red Hat Enterprise Linux Workstation Optional (v. 7) pki-javadoc-10.5.18-23.el7_9
Fixes 1 record
Priority LOW 25
A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00251 · Published 2022-07-14 · Partial fix CWE-285
